16:42 #startmeeting 16:42 Meeting started Mon Dec 4 16:42:35 2017 UTC. The chair is tyhicks. Information about MeetBot at http://wiki.ubuntu.com/meetingology. 16:42 16:42 Available commands: action commands idea info link nick 16:42 \o 16:42 The meeting agenda can be found at: 16:42 [LINK] https://wiki.ubuntu.com/SecurityTeam/Meeting 16:42 [TOPIC] Weekly stand-up report 16:42 jdstrand: you're up 16:44 hey 16:44 This week I'm primarily focusing on things for 2.30: 16:44 * finish review-tools resquashfs tests 16:44 * investigate/implement proper fix for hotplugged devices not being added to device cgroup (mir input forum issue) 16:45 * policy updates PR for 2.30 16:45 * pickup the ssh/gpg interfaces PR 16:45 * snapd 2.30 PR reviews 16:45 * investigate biometrics observe interface 16:45 * implement screen-lock interface 16:45 * non-2.30 PR reviews as have time (eg, layouts, xdg-settings) 16:45 that's it from me 16:45 mdeslaur: you're up 16:45 I'm in the happy place this week 16:45 I just published an evince update 16:45 and I have a couple more to test 16:45 I also want to work on ubuntu-support-status this week 16:45 and I'm off on friday 16:45 that's it for me, sbeattie? 16:46 I'm in the happy place 16:46 I'm still researching cve triage process for snaps 16:46 I have some upstream apparmor tasks I need to get to 16:47 I am also monitoring kernel cves/respins 16:47 and I have a couple of other random issues on my plate 16:47 that's it for me; tyhicks, over to you. 16:47 * weekly role: happy place 16:47 * embargoed issues 16:47 * squashfs reproduceability 16:47 * nudge a number of things along: 16:47 * snapd seccomp logging PR 16:48 * libseccomp Xenial SRU 16:48 * audit SRUs 16:48 * libseccomp-golang upstream PR 16:48 jjohansen: you're up 16:48 I am working on making apparmor mount mediation work with the mount code rework 16:49 I will also being doing a 4.14 kernel for the kernel team 16:49 and maybe I can get some work done on updating the backport kernels 16:50 and I suppose there are several bugs to look at but I don't have any bug numbers of particular ones 16:50 sarnold: you are up 16:51 I'm on bug triage this week 16:51 and doing some embargoed work 16:51 with libteam MIR after that, if there's time 16:52 that's it for me, chrisccoulson? 16:52 I need to finish up rust 1.22 updates this week. There are currently 3 separate failures I need to investigate, and one of these looks like it might be the "rust builds fail randomly in launchpad" issue I had last time 16:53 which I worked around by continually hitting retry until it built 16:53 I've got an embargoed update to prepare 16:54 I should be able to look at this apparmor / audit work this week 16:54 that's me done 16:54 I'm on community this week 16:54 Other than that I am still working on two internal assignments and an embargoed issue. 16:54 on to you, leosilva 16:54 I'm on CVE-triage this week. 16:55 I just published curl for precise 16:55 I'll do my normal hunting too and some research. 16:55 that's it for me. tyhicks it's back to you! 16:56 [TOPIC] Highlighted packages 16:56 The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. 16:56 See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. 16:56 https://people.canonical.com/~ubuntu-security/cve/pkg/sun-javadb.html 16:56 https://people.canonical.com/~ubuntu-security/cve/pkg/yaml-cpp.html 16:56 https://people.canonical.com/~ubuntu-security/cve/pkg/most.html 16:56 https://people.canonical.com/~ubuntu-security/cve/pkg/git-hub.html 16:56 https://people.canonical.com/~ubuntu-security/cve/pkg/libuser.html 16:56 [TOPIC] Miscellaneous and Questions 16:56 Does anyone have any other questions or items to discuss? 16:57 jdstrand, mdeslaur, sbeattie, jjohansen, sarnold, ChrisCoulson, ratliff, leosilva: Thanks! 16:57 #endmeeting